Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/NmkuWisNNR7yCTNM4BUhyNRxVxo.roa
File: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (raw, json)
Hash identifier: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=
Subject key identifier: 36:69:2E:5A:2B:0D:35:1E:F2:09:33:4C:E0:15:21:C8:D4:71:57:1A
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 0194228DEA18471B68E3FF928A24E91F1911
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/NmkuWisNNR7yCTNM4BUhyNRxVxo.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15768
IP address blocks: 195.35.90.0/23 maxlen: 24
195.35.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ea:18:47:1b:68:e3:ff:92:8a:24:e9:1f:19:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36692e5a2b0d351ef209334ce01521c8d471571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:14:90:4e:f5:c7:f8:13:db:29:06:af:1d:
64:3e:67:ec:fa:38:42:b5:26:5d:09:a3:bb:d3:9e:
c6:ab:bc:48:93:cd:ba:36:aa:30:f2:b8:52:c0:34:
3a:a6:94:d9:5d:45:e3:78:04:48:7d:f7:c7:ee:24:
37:f5:64:0f:82:af:7d:0b:87:67:f3:7f:b4:b2:97:
e9:9d:0b:3c:be:c2:1d:ed:e9:8d:63:f0:56:19:c4:
2f:cc:0b:5e:f3:53:48:92:73:2b:aa:30:87:cc:89:
55:93:57:b3:f7:63:12:00:12:b6:9f:d4:45:ca:8b:
5b:d3:ee:05:5f:31:d6:05:db:8e:6d:20:92:0e:cc:
86:eb:7b:cc:41:6a:58:fe:62:ae:13:01:0e:33:be:
c2:3b:29:7b:18:af:22:d5:eb:49:d7:0d:93:af:fc:
9d:06:87:ae:75:b8:ec:c9:3f:e2:b7:9b:a8:d9:45:
bb:6e:bf:7f:2e:da:bb:89:51:c1:c1:3f:eb:2a:0b:
ad:7d:47:4d:6a:ac:57:e5:2f:78:82:ee:4f:31:1d:
74:36:90:b6:81:d6:d4:ca:02:a7:b9:10:c2:c4:e8:
72:dc:44:96:66:10:e9:27:71:61:11:22:f8:dc:58:
de:d4:2e:8c:5b:f5:34:ae:19:d0:ef:63:63:dd:ff:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:2E:5A:2B:0D:35:1E:F2:09:33:4C:E0:15:21:C8:D4:71:57:1A
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/NmkuWisNNR7yCTNM4BUhyNRxVxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.90.0/23
Signature Algorithm: sha256WithRSAEncryption
40:d6:c9:5c:b6:01:68:d0:5b:e1:34:e9:fb:0b:ba:eb:03:26:
39:00:ec:d8:8f:e7:f8:bd:32:bf:38:da:18:e7:0a:1d:9d:d0:
4b:88:f5:7c:17:97:4a:20:20:4e:a9:92:d8:30:b5:79:2d:a1:
f0:2b:3b:3a:41:4e:6d:9a:37:b4:05:90:23:0f:7d:73:2a:89:
0f:d7:0b:f8:d2:3b:ae:16:08:31:ff:2d:1d:de:27:a8:5a:d7:
17:95:b7:d3:be:5d:c5:62:a4:5d:78:09:9d:2d:cf:da:b7:92:
d4:e0:5c:9c:32:44:bc:9f:38:73:30:60:3b:6e:67:48:b1:cb:
24:41:a8:0e:44:d2:a4:e3:c7:10:4f:c3:ac:7c:f4:7b:25:3f:
a1:61:ce:b3:a1:d1:85:d6:c7:7a:51:73:0b:be:f3:a1:be:d6:
08:a6:52:b1:15:93:8e:58:69:c6:cb:e7:f1:b7:9e:f4:cb:e8:
fc:1e:bf:17:1a:b9:93:fa:0e:40:0d:60:70:6a:08:97:76:59:
6f:1a:35:c4:f8:38:dd:f0:fc:33:41:39:16:30:fe:ce:79:b9:
40:ad:65:6e:c9:fd:69:62:1e:1e:d9:a0:5d:1f:97:fc:26:5d:
b8:10:75:c3:52:10:1d:7b:b1:7e:8f:49:63:e8:e4:c7:c5:31:
d5:12:70:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:48 2025 by rpki-client